General

  • Target

    JaffaCakes118_428a489bbb7c409666b5220ee9cb1725

  • Size

    264KB

  • Sample

    250127-xayn7s1qen

  • MD5

    428a489bbb7c409666b5220ee9cb1725

  • SHA1

    c99f61154bb016cbf423c8e15a712bb9833051e6

  • SHA256

    d148c6be901d801fe5e3cb5ebf94732bf6a6757e158ad1f758473b178e17453e

  • SHA512

    b6cf8b9777451ddbd05d5741a8aead9f1b9e65624ab000aa52d05868e69e6d304dad6939883c53d0129bf59e263f73e7e78e91edb7f452a4825e3e678b77b84e

  • SSDEEP

    6144:ErlVrh6fSkFmTGpUpulbFrHuDpGQkwO8T62asOLNhIbwHojoDtbatbeWK:eoZ8qpUwufw8T6XLNhcwHWntbbK

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_428a489bbb7c409666b5220ee9cb1725

    • Size

      264KB

    • MD5

      428a489bbb7c409666b5220ee9cb1725

    • SHA1

      c99f61154bb016cbf423c8e15a712bb9833051e6

    • SHA256

      d148c6be901d801fe5e3cb5ebf94732bf6a6757e158ad1f758473b178e17453e

    • SHA512

      b6cf8b9777451ddbd05d5741a8aead9f1b9e65624ab000aa52d05868e69e6d304dad6939883c53d0129bf59e263f73e7e78e91edb7f452a4825e3e678b77b84e

    • SSDEEP

      6144:ErlVrh6fSkFmTGpUpulbFrHuDpGQkwO8T62asOLNhIbwHojoDtbatbeWK:eoZ8qpUwufw8T6XLNhcwHWntbbK

MITRE ATT&CK Enterprise v15

Tasks